lov-install-zenmux-api
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's workflow explicitly enforces secret isolation, instructing the agent to read keys only from authorized sources and prohibiting their storage in source code, logs, or command history.
- [SAFE]: The
profile_store.pyscript implements a proactive security filter that prevents the recording of sensitive fields (e.g., api_key, password, token) into the persistent user profile, reducing the risk of accidental credential exposure. - [SAFE]: The utility scripts included with the skill use established secure practices, including
yaml.safe_load()for parsing configuration files and atomic write operations to prevent data corruption or race conditions during profile updates.
Audit Metadata